nexus-stake[.]web[.]app

This domain, nexus‑stake.web.app, was registered through Google LLC on 25 November 2024 and resolves to the Fastly edge address 199.36.158.100 located in the United States (AS54113). The site serves content over HTTPS with a certificate issued by Google Trust Services (WR4) and enforces HSTS, while also supporting HTTP/3. An HTTP 200 response is returned and the page title reads “Stake Nexus NFTs”, indicating a cryptocurrency‑related lure. The infrastructure employs Firebase hosting. Threat intelligence classifies the activity as a crypto‑drainer scam; the domain is listed on one security blocklist and has been blocked by PhishDestroy. Reputation metrics are poor, with a Gridinsoft trust score of 0 / 100 and two of ninety‑one VirusTotal scanners flagging the site. The current risk rating is high and the campaign remains active. While the page content has not been examined, the observed indicators suggest an attempt to entice victims into transferring cryptocurrency. Defenders should prioritize blocking the domain at network borders, updating DNS and URL filtering rules, and monitoring Fastly‑associated IP ranges for similar patterns. Ongoing telemetry collection is recommended to detect any evolution of the campaign.